MySpace.com Attacked by Worm : Profiles Shut Down

MySpace, which we recently wrote about due to its partnership with Google, has shut down hundreds of user profiles as a precaution to a worm which is infecting user computers via MySpace & Apple’s QuickTime media player. The worm seems to change user profiles and add malicious links and content when the video is played.

Joris Evers at CNet reports:

A malicious video on MySpace.com pages changes people’s profiles when played, embedding itself and adding links to fraudulent Web sites, experts have warned.

The video is a rigged QuickTime file that exploits a MySpace vulnerability and support for JavaScript in Apple Computer’s embedded media player, Web security firm Websense said in an alert posted on Friday.

When played by a MySpace user, the video adds itself to the user’s MySpace page and replaces the links on the user’s profile with links to phishing Web sites, Websense said. Phishing sites are fraudulent sites that attempt to trick people into giving up sensitive information such as log-in credentials.

And more from InformationWeek:

MySpace over the weekend shutdown hundreds of user profiles that had been infected by a worm that directed victims to a phishing site where they were asked to type in their user name and password, a security firm said.

As of Monday, all infected profiles on the popular social network had been taken down… The worm, which was discovered Friday, exploited the Javascript support within Apple Computer’s QuickTime player, which can be embedded in MySpace user profiles. The vulnerabilities were used to replace the legitimate links on MySpace profiles with links to the phishing site.

Written By:
PG

Loren Baker | Search Engine Journal | @lorenbaker

Loren Baker is the founding editor/creator of Search Engine Journal and remains an advisor and Editor In Chief to this publication.

More Posts By

Comments

  1. Primo says:

    cool it’s nice info 2 kno…

  2. diddy1 says:

    I knew it was bound to happen sometime.

    Thank You

  3. LookAtMe says:

    WOW! Hope things work out and we are back in business!

  4. Ryan E. Pajo says:

    Your home page is undergoing routine maintenance. We apologize for the inconvenience! why

  5. What a development. I think this kind of misuse is one of the main risks in the business model of myspace. I guess they just have to live with this risk.

    Thank you for sharing this story with me !

  6. eddie ryan says:

    This is so scary!!!It was bound to happen because myspace lets members upload all types of sparkle tags and other pimpmyspace.com kind of stuff and who knows whats hidden in each upload. Thats why I think new sites like vois.com are going to be the winner in this as you cant upload outside stuff into the site

  7. Jackie Sanders says:

    I got the worm. It fried my computer Sept. 27 with pop ups that froze my screen. It was out of Japan. They send you the virus protection “Centuran” to buy to remove the pop ups that they immobilize your screen with. If you don’t purchase it then they unleash the worm. Prior to that I wasn’t able to log on…someone was already on using my password. I changed password, but it took over two months to take affect.

  8. BUBBLES says:

    ITS ABOUT TIME MOST OF THOSE LOW-LIFE DID SOME THING WITH THERE MIND OTHER THAN MYSPACE. MOST OF IT JUST MESSES UP YOUR MIND. I’M NOT SAYING ITS BAD IT’S THAT FIND SOMETHING ELES TO DO.

  9. kingsteverx7 says:

    This is bullsh*t what kind of a**hole would do something like this i know that alot of people stay incontact without family member through this website and i dont mean to sound like a nagging ol prick but who ever cuased this worm is a complete b*st*rd cause it around the holidays. And to those of you who are bagging on poeple for being one myspace so much what do u care its not effecting you. stop worrying about other poeple and get a life of your own.

  10. elizabeth malave says:

    I thank you for the information shared and I hope that this is just a temporary thing. Thank you for my space.

  11. Satori says:

    i can’t even get on mine… and that sucks big time man….. hope it gets fixed soon

    thanx

  12. tammy says:

    I can’t get onto my website and it sucks because i go on it everyday to check my email or chat with my friends. I hope its fixed really soon. I also hope its there like i left it before this stuff all started on myspace.

  13. carol says:

    i cant log on to my profile on myspace it just shuts down my computer…help please this sucks because i cant even get my messages

  14. LEIA CORBITT says:

    MYSPACE

  15. ruben says:

    i like to have fun

  16. Ha wats up.

  17. bob says:

    how do i get back on my webpage if i cant get on

  18. itz me says:

    make sure all you users have anti-virus protection and firewalls installed on your computers and frequently run virus scans. If you have winxp you can do a system restoration on your computer, this will allow you to go back to a date when your computer was working properly……..start>accessories>system tools>system restore……good luck!!!!!!

  19. go play in traffic says:

    ya mine fucked up when i open any internet thing it fucks up hardcore it shows stuff that logs u in as a line like this _____________________
    and nothing is there and iono its all fucked up bad

  20. andy says:

    WTF…i keep in touch with so many contacts on myspace…thank u so much for letting us no of this worm…i just hope u can stop it.

  21. MuncH says:

    WOW IM SO HAPPY THAT THEY FINALLY ARE GONNA DO SOMETHING. THIS HAS BEEN GOING ON FOR MONTHS!! MYSPACE TECHS ARE FUCKING IDIOTS IF THEY DIDNT SEE THIS COMING. EVER SEE THE DEFAULT BLUE BAR WHEN ITS RED??? THATS THE FIRST SIGN. IF YOU GOT A RED BORDER THEN YOU ARE FUCKED! THANKS TO SOME GAY COLLEGE STUDENT THAT LIVES IN HIS OR HER PARENTS BASEMENT WITH NO RESPONSIBILITY AND NO FRIENDS. RUN PLENTY OF VIRUS SCANS AND GET AD-AWARE FOR SPYWARE

  22. Jimbo says:

    I got the worm;and it raised havoc on my computer;slowing everything down, until a firewall appeared and could not get rid of. This all began, when I purchased an anti virus protection plan(AntiVirusGolden)online that kept popping up, warning me that I was being attacked by trojans and a worm. I purchased their plan;was given a code to paste for registration. I followed their instructions but could never connect. My bank said I was most likely scammed;had to change to a new debit credit card, @,etc. I had to reprogram my computer;an expensive cost to me. My warning to all—do not purchase any AntiVirus protections over the internet;most likely; u will be scammed. Not a Very Merry Christmas.

  23. DEE ! DAM says:

    this just f***d my s**t up , i cant log on my page. my password does not work , hey this is crazy dude! I downloaded some antivirus, its doing some protection but i think they shut me down, this is a good passtime so please SOS!

  24. georgette says:

    i got the worm and it took me a week to fix the programs that were infected. i am greatful that you caught this incident and greatful for spybot s&d for there program to delete the worm and other malicious contents in my computer. thank you again.

  25. john reyes says:

    my password does not work on myspace and im asking to send password to my e- mail and do not get it

  26. Erica says:

    i cannot see none of my pictures or other profiles. i hope they fix this fast .

  27. skye says:

    dude that sucks man i love myspace it is so awsome well anyway thanx for the info catch ya later

    skye

  28. juliehoney0033 says:

    A friend of mine was infected

  29. JOSEPH says:

    YOUSUCKASS

  30. jason says:

    i still havent figured out why bein a cyber vandal is amusing. “ok fine guys, we cant stop you” “youre better with computers than we are”. but i’ll tell ya what, i’d bet dollars to donuts i’ll beat your nerdy little ass if i get ahold of ya.
    to all you geekers out there that thinks this is funny: if you dorks were working and getting laid, you wouldnt have time to make a “virus”. life will keep ya busy, if ya have one. someone should wipe these nonbreeding, boils off the face of the earth. it’s the same as waking up to find that your car has been spraypainted or a window busted. this shit costs money. money that mommy and daddy didnt give. you god damn little hoods. if i ever bet ahold of one of you, im gonna break your F***in necks!

  31. Michelle says:

    Hey guys, well this just happen to mines like an hour or two ago. Does this mean my account got deleted lol.?